# Logging Security Zone

**URL:** <https://forum.inductiveautomation.com/t/logging-security-zone/29743>\
**Category:** Ignition\
**Created:** [November 6, 2019, 11:24pm UTC](https://forum.inductiveautomation.com/t/logging-security-zone/29743 "2019-11-06T23:24:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jonathan](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jonathan](https://forum.inductiveautomation.com/u/Jonathan)\
**Post date:** [November 6, 2019, 11:24pm UTC](https://forum.inductiveautomation.com/t/logging-security-zone/29743/1 "2019-11-06T23:24:43Z")

</div>

Is there a logger I can turn on in the log to see what security zone a gateway connection is getting assigned to? Maybe its not matching the server name or something like that. in the past I just keep removing/adding and changing settings until it starts letting me write.

Again, I am running into not being able to write to a tag after setting up a new security zone and setting a Service Security to allow edit and writes to a tag provider.

---

<div class="post-metadata">

**Author:** ![KathyApplebaum](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kathyapplebaum/32/7261_2.png) [@KathyApplebaum](https://forum.inductiveautomation.com/u/KathyApplebaum)\
**Post date:** [November 6, 2019, 11:34pm UTC](https://forum.inductiveautomation.com/t/logging-security-zone/29743/2 "2019-11-06T23:34:14Z")

</div>

Try setting `Security.SecurityZones` and `Services.Security` to debug.

---

<div class="post-metadata">

**Author:** ![Jonathan](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jonathan](https://forum.inductiveautomation.com/u/Jonathan)\
**Post date:** [November 6, 2019, 11:47pm UTC](https://forum.inductiveautomation.com/t/logging-security-zone/29743/4 "2019-11-06T23:47:13Z")

</div>

is my problem because the host name is blank in this statement? why is the host name blank?

in the SecurityZones

> No user-defined security zones matched. Falling back to default security zone. Remote machine sent: {ip-address=x.x.x.x, direct-connection=true, is-secure=true, scope=1, gw-name=MyGateway, host-name=}

So I changed the zone to use the gateway name instead of the server name and now it works.

I have another related question though. I have a central gateway A that is making a outgoing gateway connection to gateway B and gateway A is also making a outgoing gateway connection to another gateway C.

For some reason the connection from A to B is not direct, but the connection from A to C is direct. Why would this be? I looked at the gateway connections and they are identical besides the gateway name.